Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gH_qFCrlj1umGGvjXd4aysKKMdE.roa
File: gH_qFCrlj1umGGvjXd4aysKKMdE.roa (raw, json)
Hash identifier: 3vDR59sFeCzchlok1ys7TVR2BakJV7cxIoXjsREfiiY=
Subject key identifier: 80:7F:EA:14:2A:E5:8F:5B:A6:18:6B:E3:5D:DE:1A:CA:C2:8A:31:D1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0187DA39A31C369E8EE5FD938C8CA0757EA0
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gH_qFCrlj1umGGvjXd4aysKKMdE.roa
Signing time: Tue 02 May 2023 02:10:23 +0000
ROA not before: Tue 02 May 2023 02:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:da:39:a3:1c:36:9e:8e:e5:fd:93:8c:8c:a0:75:7e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: May 2 02:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=807fea142ae58f5ba6186be35dde1acac28a31d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:87:f0:1a:42:74:81:cb:e4:97:d0:72:61:
e8:a1:be:80:dc:d4:02:5b:e8:26:41:f6:33:aa:9d:
1a:78:47:51:88:0d:e3:d4:33:b0:36:d2:7c:41:8c:
5e:b1:b1:4d:6c:79:0d:8e:74:86:b0:c7:2c:9e:81:
71:67:63:cc:c3:fa:62:82:9c:82:17:98:05:22:fd:
3a:49:cf:fa:aa:7d:5d:e7:d2:20:64:20:6c:58:08:
34:50:01:7e:06:2e:98:9f:ea:01:8f:10:62:4e:b9:
3b:6b:34:82:0d:21:cf:83:3e:a8:a4:39:c7:b4:08:
96:6c:8d:c7:31:8d:98:65:96:f9:3c:97:4a:89:7f:
31:e5:a9:dc:78:1a:95:c1:c1:66:b3:7f:6f:04:6a:
fb:bd:ec:f1:27:c7:4f:35:c1:d6:01:ec:31:83:eb:
8e:a5:b1:a9:61:66:5f:56:c5:9a:ca:be:b6:94:f5:
08:8a:42:79:66:00:2d:d8:50:4f:5b:d0:c2:27:83:
a3:24:09:b8:21:a2:9b:83:69:04:3c:f8:80:0b:3d:
01:b3:c5:11:63:91:9e:81:97:2f:31:eb:be:73:d2:
67:36:c7:8a:f6:c5:a9:d7:a4:1c:13:95:d1:c2:75:
35:52:af:f1:85:d8:cf:77:f3:71:d8:34:49:d3:cb:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7F:EA:14:2A:E5:8F:5B:A6:18:6B:E3:5D:DE:1A:CA:C2:8A:31:D1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/gH_qFCrlj1umGGvjXd4aysKKMdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
a3:4e:24:dd:d4:48:db:76:8b:1e:df:31:95:a2:78:a0:c3:ba:
f3:f6:19:d8:4b:e4:23:f2:1b:c5:44:d0:3c:1b:51:8b:cc:8f:
6d:65:79:db:89:e0:ac:5f:c8:ff:44:64:07:02:d4:d1:1a:ba:
85:29:d8:57:05:b7:f2:6a:1e:a9:60:3d:02:52:10:53:2d:5e:
c6:ca:58:c4:d0:ca:ff:d7:fb:03:f8:1d:69:5b:da:53:1b:1e:
8d:82:f5:eb:36:25:57:87:b8:13:88:bc:97:9b:24:b2:48:db:
a7:0a:9d:86:53:29:3f:1b:07:4c:3c:a6:de:82:01:0f:9e:7e:
a6:b6:b7:11:80:d1:21:ae:8a:53:d9:05:38:6c:20:75:47:fe:
15:a0:14:1a:ad:e5:7b:8e:de:0b:37:05:fc:3f:37:b5:c4:d9:
8c:08:d3:5b:8b:e5:3e:34:b4:05:34:82:f2:52:41:14:32:c5:
b9:68:f9:b3:cb:78:b3:31:84:db:8f:50:23:a2:85:87:3e:cb:
67:89:57:ff:52:62:3d:b6:c8:2d:1f:3d:f0:d0:06:d4:7f:e6:
0a:2b:ee:dc:e6:f1:63:69:05:fd:36:81:e8:4c:0a:f5:31:04:
0a:35:a2:e9:7f:ba:97:4c:47:56:f1:2f:fe:61:40:f6:12:b9:
2b:8b:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 22:50:48 2025 by rpki-client